Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76aa40ec-69b9-44f1-9209-484f2d282a6a.roa
File:                     76aa40ec-69b9-44f1-9209-484f2d282a6a.roa (raw, json)
Hash identifier:          TmyYP16xJ80vNohI9/i76188MH0VeW/umBMr2X7/kiY=
Subject key identifier:   78:8A:69:C2:3E:FA:31:58:38:B2:A4:09:93:8C:D8:2A:88:61:66:CF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2087E92BD3D7A8FF2E418EA5EC95762F6EFA127B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76aa40ec-69b9-44f1-9209-484f2d282a6a.roa
Signing time:             Fri 17 Oct 2025 00:51:15 +0000
ROA not before:           Fri 17 Oct 2025 00:51:15 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        157.175.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:87:e9:2b:d3:d7:a8:ff:2e:41:8e:a5:ec:95:76:2f:6e:fa:12:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:51:15 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=26dc2a044bd63596d2b8886d321ed36baaa3221b5919649ec6824db32abf8dc6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:0e:2b:fb:22:8b:65:d9:31:33:ff:a7:51:
                    01:4d:20:13:62:b9:70:90:a6:a3:fa:ba:ad:17:58:
                    0c:1f:1b:53:45:8a:e3:76:44:b4:bf:5f:b9:f2:42:
                    2b:79:a3:0b:e3:da:e4:36:ad:39:18:6b:29:e9:8f:
                    48:a9:cd:c5:2f:f3:f7:9c:83:e5:3c:8c:3c:b0:07:
                    f9:86:84:6c:58:36:3d:df:b7:4d:27:01:ca:77:45:
                    ae:5f:3c:2f:1e:57:db:9e:bb:1f:85:40:36:bb:96:
                    fb:d3:24:e3:77:61:18:fc:1d:f1:33:d2:56:f2:4f:
                    49:e6:de:38:ad:08:0b:4d:f1:fb:52:8c:22:c4:ab:
                    05:61:a7:c9:54:5e:c5:ac:20:41:2d:0c:1d:ba:25:
                    b3:6d:90:46:d5:95:d3:b0:8c:84:7f:a0:7c:41:bc:
                    cd:04:aa:46:33:30:70:cc:f2:15:53:5b:a5:85:28:
                    62:ff:05:98:b2:49:c5:7d:c2:a7:04:91:fe:2e:bf:
                    d5:bf:4d:48:21:6c:e5:de:97:4d:de:09:f8:9a:18:
                    c6:72:78:bb:cb:d8:d1:03:b9:c5:0c:38:17:da:77:
                    a6:88:7b:46:c2:ab:2d:13:b6:e9:e5:67:1a:4a:27:
                    8b:1e:d9:ab:7a:b4:64:1f:9d:10:ea:31:1d:7c:8c:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8A:69:C2:3E:FA:31:58:38:B2:A4:09:93:8C:D8:2A:88:61:66:CF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76aa40ec-69b9-44f1-9209-484f2d282a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d5:da:e0:00:1a:89:52:bc:8e:f3:89:13:25:14:95:e6:4b:e0:
         9c:7a:62:51:87:5f:16:56:0f:bc:87:b2:06:66:2a:0c:a1:57:
         92:eb:cf:b0:ff:61:82:b2:68:c2:b2:a9:c6:fc:d3:1e:89:ff:
         0f:e2:6f:91:e0:b8:d5:87:b0:fd:70:97:f1:55:ad:59:ea:36:
         8e:04:86:04:f6:d5:2a:44:35:c8:62:be:ae:02:17:e8:d4:83:
         7b:91:17:58:cd:7a:e3:b6:3f:6d:67:6f:63:80:a8:31:c8:c6:
         30:a5:1f:c0:87:cd:5d:c8:2c:62:2f:fd:0c:2c:7a:d0:3a:af:
         f0:6f:47:a4:ed:38:e3:7d:bc:6f:76:fb:c8:22:b2:ab:06:01:
         25:77:26:f9:98:3e:e3:d2:04:46:94:ff:2e:5f:d5:f8:a4:6c:
         46:38:f6:e0:62:dc:5d:0a:9f:2b:34:02:63:06:bc:5c:2d:51:
         a3:f8:dc:20:b3:29:40:a7:9a:ec:c0:f6:54:1a:02:5a:d5:3a:
         25:99:6a:95:1a:25:fa:d0:5f:f5:58:a9:0a:8c:69:06:d1:5e:
         2d:f6:af:11:e3:6c:a7:4e:ac:3c:d8:1d:56:a4:4e:41:08:a0:
         da:18:17:07:3d:de:22:86:26:7c:2b:89:fa:94:f4:59:5e:a5:
         8a:60:4a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----